Fedora Update for openssl FEDORA-2010-5357

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2034-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 17, 2010 http://www.debian.org/security/faq -...

Mandriva Update for openoffice.org MDVSA-2010:075 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2010:075 openoffice.org Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Ubuntu Update for cmake vulnerabilities USN-890-6

Ubuntu Update for Linux kernel vulnerabilities USN-890-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN8906.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for cmake vulnerabilities USN-890-6 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Fedora Update for mimetex FEDORA-2010-6546

Check for the Version of mimetex OpenVAS Vulnerability Test Fedora Update for mimetex FEDORA-2010-6546 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

This module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates not RTM, and Windows 2008 Server prior to R2. Windows Vista without SP1 does not seem affected by this flaw. This...

Mandriva Linux Security Advisory : cups (MDVSA-2010:073-1)

Multiple vulnerabilities has been found and corrected in cups : CUPS in does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a the product's web interface,...

openSUSE Security Update : gimp (openSUSE-SU-2010:0110-1)

Integer overflows in the BMP plug-in potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files CVE-2009-1570. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-1564. Reason: This candidate is a duplicate of CVE-2009-1564. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2009-1564 instead of this candidate. All references and descriptions in this...

Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)

This host is missing a critical security update according to Microsoft Bulletin MS10-020. OpenVAS Vulnerability Test $Id: secpodms10-020.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 980232 Authors: Antu Sanadi Updated By: Madhuri D on...

CVE-2009-4510: TANDBERG VCS Static SSH Host Keys

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Static SSH Host Keys Release Date:...

openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-2261)

This patch updates Mozilla XULRunner 3.0 engine the 1.9.0.19 release. It includes also following security fixes: MFSA 2010-16: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed eviden...

CVE-2009-4509: TANDBERG VCS Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Authentication Bypass Release Date:...

openSUSE Security Update : MozillaFirefox-branding-openSUSE (MozillaFirefox-branding-openSUSE-2281)

This patch updates the openSUSE Mozilla Branding to version 3.5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update MozillaFirefox-branding-openSUSE-2281. The text description of this plugin is C...

CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

CVE-2009-4765

CVE-2009-4765 affects CNR Hikaye Portal 2.0. The issue is insufficient access control allowing remote attackers to download the database by requesting db/hikaye.mdb from the web root. Connected documents corroborate the same description across Red Hat and NVD sources. No explicit exploit details,...

CVE-2009-4766

The CVE-2009-4766 entry concerns YP Portal MS-Pro Surumu (MS-Pro Portal Scripti) versions 1.0 and 1.2. The issue is improper access control that stores sensitive data under the web root, enabling remote attackers to retrieve the database file galeri/database/db.mdb via a direct request. Connected...

CVE-2009-4509

The TANDBERG Video Communication Server (VCS) web management interface in versions around x4.2.1 (and possibly earlier) uses forged/predictable session cookies in tandberg/web/lib/secure.php and tandberg/web/user/lib/secure.php, enabling an unauthenticated attacker to bypass authentication and po...

CVE-2009-4510

The CVE-2009-4510 issue affects TANDBERG Video Communication Server (VCS) firmware where SSH services ship with a fixed DSA host key prior to X5.1. This hard-coded key enables remote attackers to perform server impersonation and man-in-the-middle attacks on SSH connections, potentially yielding s...

CVE-2009-4511

The CVE-2009-4511 issue affects TANDBERG Video Communication Server (VCS). It is a directory traversal flaw in the web management interface (two scripts: helppage.php and user/helppage.php) that an authenticated administrator or lower-privilege user could exploit to read arbitrary files on the ap...